v0.2.6

Changelog

• 6488ca3 assets: pin bundle invariants; apply </script guard to RespondJS
• 7e13fdd docs/ai: arch hardening wave complete, v0.2.5 shipped, launch (a)(b) done
• 5232af7 manifest: absorb blockPrompt/blockText; add registry cross-check test
• 2dbb266 manifest: schema family@N versioning with lenient parse / strict validate
• 8dbc9e3 server: extract tick(), gate ask-digest on sig change, add watcher/CRUD tests
• 8d4c68d server: log scan duration per tick; warn at >500ms